Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9aA7NGyIqLwQcXpMBB1IjlAvjjw.cer
File:                     9aA7NGyIqLwQcXpMBB1IjlAvjjw.cer (raw, json)
Hash identifier:          7waoIgkXcM07TUfGRPOvgcF6WdfjhwJYiOrgPIFV42Q=
Subject key identifier:   F5:A0:3B:34:6C:88:A8:BC:10:71:7A:4C:04:1D:48:8E:50:2F:8E:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7C769809FB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/98/96c5c2-d5f5-4c47-b407-57db384372d6/1/9aA7NGyIqLwQcXpMBB1IjlAvjjw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/98/96c5c2-d5f5-4c47-b407-57db384372d6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 03:02:55 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.158.168.0/22
                          IP: 2a10:f100::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534565620219 (0x7c769809fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:02:55 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f5a03b346c88a8bc10717a4c041d488e502f8e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5d:db:3d:34:d4:2d:d0:8a:a5:0f:1d:ea:b3:
                    3b:5e:3f:2c:d8:e1:ca:e5:49:ae:b0:cd:dd:64:9d:
                    f9:ce:e7:ba:2a:22:ff:7a:16:47:aa:22:ab:a4:1e:
                    f1:20:e6:13:6a:d1:7a:0f:d9:01:d2:ef:d4:7b:49:
                    36:f0:41:51:ae:8f:f4:b9:12:eb:56:94:51:57:8d:
                    b2:a0:ce:48:80:e8:0e:e0:b4:02:0e:b3:5e:59:87:
                    0b:9e:80:1d:5b:c9:9b:80:19:44:83:9e:ba:88:d2:
                    e5:17:cf:76:f8:31:ea:6f:5c:99:f0:27:9c:dd:4e:
                    2f:33:82:6e:d8:f5:b7:91:73:b9:8b:83:60:7d:58:
                    98:72:a8:ba:e0:1a:a1:3d:1d:cd:c9:1f:d6:b7:37:
                    57:c7:c4:ed:5d:cd:86:ac:68:95:3c:b1:6c:29:07:
                    d6:e5:b2:33:22:d1:47:ac:c0:e4:5f:42:39:db:6a:
                    6b:30:cb:6e:46:66:80:f8:6d:80:5d:46:91:d6:f1:
                    c8:f9:63:89:e0:4b:59:c1:a8:51:78:36:27:26:76:
                    ee:b0:b6:65:87:d9:ad:29:77:25:b0:67:dc:2b:20:
                    e8:b5:e6:94:eb:76:e0:d8:5e:f1:15:ef:65:59:a9:
                    d0:13:57:bd:e8:15:bb:40:12:8f:1d:47:48:63:e6:
                    17:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A0:3B:34:6C:88:A8:BC:10:71:7A:4C:04:1D:48:8E:50:2F:8E:3C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/96c5c2-d5f5-4c47-b407-57db384372d6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/96c5c2-d5f5-4c47-b407-57db384372d6/1/9aA7NGyIqLwQcXpMBB1IjlAvjjw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.168.0/22
                IPv6:
                  2a10:f100::/29

    Signature Algorithm: sha256WithRSAEncryption
         21:08:ec:11:29:5d:fc:85:d8:2e:09:60:cc:53:42:67:21:35:
         97:25:1d:2b:40:e6:be:cb:67:04:e9:a6:ee:cb:02:13:3c:4e:
         e8:2f:8f:c2:9c:65:9b:3e:44:fc:55:e5:65:49:93:43:94:65:
         a7:62:4b:ae:28:9a:03:e0:52:5b:a3:f0:70:98:52:bf:6c:ed:
         69:40:b2:fb:5e:f6:c8:62:36:2a:bb:3f:34:bd:c7:69:96:81:
         34:bf:c3:43:e6:c4:f8:81:57:27:ce:47:89:38:fd:fb:b3:d8:
         01:d4:87:80:e4:c0:13:f4:31:5c:1a:57:71:e5:df:83:e7:1f:
         91:6d:38:43:b5:ed:72:54:1b:3b:34:c5:b9:37:30:95:59:1b:
         b4:6c:7c:87:47:35:63:58:c4:3c:f3:27:38:75:13:cb:ae:91:
         6d:2a:5a:2d:d4:5b:1d:73:22:54:9c:3d:12:fa:f2:cc:64:78:
         1b:da:0f:6d:b9:c9:e5:93:bd:90:3c:c7:ec:84:07:1d:ac:8c:
         ea:eb:6f:e5:42:46:14:8b:18:d6:a0:76:00:3a:85:ff:06:2f:
         e8:20:94:4b:da:a0:38:7e:cf:80:52:e7:ba:4d:73:87:99:e0:
         f3:de:f4:4c:fb:86:55:15:30:76:8d:38:45:61:49:99:b3:4d:
         fa:0f:67:23
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIFfHaYCfswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMzAyNTVaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGY1YTAzYjM0NmM4
OGE4YmMxMDcxN2E0YzA0MWQ0ODhlNTAyZjhlM2MwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCsXds9NNQt0IqlDx3qsztePyzY4crlSa6wzd1knfnO57oq
Iv96FkeqIqukHvEg5hNq0XoP2QHS79R7STbwQVGuj/S5EutWlFFXjbKgzkiA6A7g
tAIOs15ZhwuegB1byZuAGUSDnrqI0uUXz3b4MepvXJnwJ5zdTi8zgm7Y9beRc7mL
g2B9WJhyqLrgGqE9Hc3JH9a3N1fHxO1dzYasaJU8sWwpB9blsjMi0UeswORfQjnb
amswy25GZoD4bYBdRpHW8cj5Y4ngS1nBqFF4Nicmdu6wtmWH2a0pdyWwZ9wrIOi1
5pTrduDYXvEV72VZqdATV73oFbtAEo8dR0hj5hfdAgMBAAGjggKTMIICjzAdBgNV
HQ4EFgQU9aA7NGyIqLwQcXpMBB1IjlAvjjwwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvOTZjNWMyLWQ1ZjUtNGM0Ny1i
NDA3LTU3ZGIzODQzNzJkNi8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85NmM1YzItZDVmNS00YzQ3LWI0
MDctNTdkYjM4NDM3MmQ2LzEvOWFBN05HeUlxTHdRY1hwTUJCMUlqbEF2amp3Lm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwE
AgABMAYDBAItnqgwDQQCAAIwBwMFAyoQ8QAwDQYJKoZIhvcNAQELBQADggEBACEI
7BEpXfyF2C4JYMxTQmchNZclHStA5r7LZwTppu7LAhM8Tugvj8KcZZs+RPxV5WVJ
k0OUZadiS64omgPgUluj8HCYUr9s7WlAsvte9shiNiq7PzS9x2mWgTS/w0PmxPiB
VyfOR4k4/fuz2AHUh4DkwBP0MVwaV3Hl34PnH5FtOEO17XJUGzs0xbk3MJVZG7Rs
fIdHNWNYxDzzJzh1E8uukW0qWi3UWx1zIlScPRL68sxkeBvaD225yeWTvZA8x+yE
Bx2sjOrrb+VCRhSLGNagdgA6hf8GL+gglEvaoDh+z4BS57pNc4eZ4PPe9Ez7hlUV
MHaNOEVhSZmzTfoPZyM=
-----END CERTIFICATE-----